Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
VIKAS1
Contributor
Jump to solution

CP 9100 UPPAK issue

Hi All,

Why my both Gateway show UPPAK and KPPK, it's should be UPPAK mode.

CP 9100 running on R81.20 JHF 99. 

we are not checking this regular when i run the fwaccel stat command it's show both gateways are different mode.

 

 

0 Kudos
1 Solution

Accepted Solutions
Timothy_Hall
Legend Legend
Legend

If the user-space SecureXL usim processes crashes enough times, the system will automatically set itself back to KPPAK.  See here: sk180298: "Userspace PPAK was disabled due to repeated crashes" message on a Security Gateway

Also look in these files for clues:

/var/log/usim_x86.elg

/var/log/dump/usermode/usim_x86.<PID>.core

/var/log/dump/usermode/fwk_snd<ID>.core

/var/log/usim_crash/crash_list

Gaia 4.18 (R82) Immersion Tips, Tricks, & Best Practices Video Course
Now Available at https://shadowpeak.com/gaia4-18-immersion-course

View solution in original post

8 Replies
G_W_Albrecht
Legend Legend
Legend

Did you try R81.20 Performance Tuning Administration Guide - Configuring SecureXL yet to change that ?

CCSP - CCSE / CCTE / CTPS / CCME / CCSM Elite / SMB Specialist
0 Kudos
VIKAS1
Contributor

I hv gone through but how come it's got changed from UPPAK to KPPAK, we are running this device over 1 years.

0 Kudos
RemoteUser
Advisor

To change from uppak to kppak, you need to do it from cpconfig.
More importantly, if you didn't change them yourself, it would be a good idea to find out why they are different with TAC.

0 Kudos
VIKAS1
Contributor

that's good idea, will connect to tac, keep update

0 Kudos
RemoteUser
Advisor

@Timothy_Hall Do you have any idea how this might be possible?

0 Kudos
Timothy_Hall
Legend Legend
Legend

If the user-space SecureXL usim processes crashes enough times, the system will automatically set itself back to KPPAK.  See here: sk180298: "Userspace PPAK was disabled due to repeated crashes" message on a Security Gateway

Also look in these files for clues:

/var/log/usim_x86.elg

/var/log/dump/usermode/usim_x86.<PID>.core

/var/log/dump/usermode/fwk_snd<ID>.core

/var/log/usim_crash/crash_list

Gaia 4.18 (R82) Immersion Tips, Tricks, & Best Practices Video Course
Now Available at https://shadowpeak.com/gaia4-18-immersion-course
RemoteUser
Advisor

I wasn't aware of this SK, thank you very much as always!!

0 Kudos
VIKAS1
Contributor

Thanks for update and SK. we have done the Gateway 2 to standby which was running on Active mode, i think due to that this issue accrued.

[Expert@EMB-SJRM2-FW01:0]# cphaprob stat

Cluster Mode: High Availability (Active Up) with IGMP Membership

ID Unique Address Assigned Load State Name

1 (local) 1.1.1.1 100% ACTIVE EMB-SJRM2-FW01
2 1.1.1.2 0% STANDBY EMB-SJRM2-FW02


Active PNOTEs: None

Last member state change event:
Event Code: CLUS-114704
State change: STANDBY -> ACTIVE
Reason for state change: No other ACTIVE members have been found in the cluster
Event time: Tue Aug 5 19:55:04 2025

Last cluster failover event:
Transition to new ACTIVE: Member 2 -> Member 1
Reason: ADMIN_DOWN PNOTE
Event time: Tue Aug 5 19:55:04 2025

Cluster failover count:
Failover counter: 14
Time of counter reset: Sat Aug 24 11:56:54 2024 (reboot)


[Expert@EMB-SJRM2-FW01:0]#

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events